exploit/windows/http/sitecore_xp_cve_2025_34510

weaponized

Sitecore XP CVE-2025-34510 Post-Authentication Remote Code Execution

view exploit source metasploittype exploitpublished 2025-06-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-34510US	—	24.8% (98th)	Exploit	2025-06-17
Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) versions 9.0 through 9.3 and 10.0 through 10.4 are affected by a Zip Slip vulnerability. A…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.